Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e34362e3136382e302f32342d3234203d3e2034383437.roa
File:                     3130332e34362e3136382e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          RpqXYDmMRubDurx/utw4k5v2jJ/T/80aCO/7C9rd7Hg=
Subject key identifier:   9A:DC:5A:0E:FA:20:0C:2B:17:E5:44:6F:48:D5:78:9A:9E:D0:D6:FA
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       468A812FC7E1EB8085A54BB95B58EE42C748B771
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e34362e3136382e302f32342d3234203d3e2034383437.roa
Signing time:             Thu 04 Jun 2026 09:09:21 +0000
ROA not before:           Thu 04 Jun 2026 09:04:21 +0000
ROA not after:            Thu 03 Jun 2027 09:09:21 +0000
asID:                     4847
IP address blocks:        103.46.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8a:81:2f:c7:e1:eb:80:85:a5:4b:b9:5b:58:ee:42:c7:48:b7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 09:04:21 2026 GMT
            Not After : Jun  3 09:09:21 2027 GMT
        Subject: CN=9ADC5A0EFA200C2B17E5446F48D5789A9ED0D6FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:20:db:f2:6a:1d:60:48:fe:12:df:90:34:03:
                    b9:4d:b8:b0:54:42:5d:aa:dc:8b:84:f3:37:f1:6b:
                    3f:69:dc:28:6d:ef:e7:a7:cb:7e:be:f7:b6:34:84:
                    be:43:9e:90:75:57:9b:f0:fa:20:8f:da:1c:b5:e9:
                    23:14:b6:4f:b1:b0:4c:5e:f5:80:ea:19:00:9c:18:
                    f1:52:5c:66:01:f1:2b:99:67:93:7c:d5:94:c1:d0:
                    d5:d4:3b:54:5f:5f:b1:69:55:8a:f7:97:52:93:3c:
                    3e:52:48:3f:b1:18:cb:d5:3f:9f:66:db:b0:38:22:
                    20:af:ef:db:de:e0:5e:b6:2d:1b:70:6f:d1:9f:a2:
                    1f:bb:e0:d1:21:22:f1:b8:18:6e:97:01:72:9a:33:
                    23:a9:cc:87:6f:fc:aa:da:8e:d3:6d:75:ce:4e:aa:
                    93:3f:0d:00:b9:39:7c:eb:b7:67:ed:b1:5a:a2:5b:
                    aa:d2:80:96:86:47:31:e3:a3:cc:3b:01:09:30:2c:
                    00:50:80:f8:f0:97:15:36:3e:8c:c7:c3:71:98:a3:
                    9a:5f:18:6a:0a:ce:2a:c8:f0:d0:58:bb:7e:27:46:
                    ec:07:ad:50:34:11:fb:10:65:88:c5:86:c9:3d:5b:
                    14:1b:c5:30:e7:8d:fb:89:08:5f:83:9d:2a:50:a2:
                    34:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DC:5A:0E:FA:20:0C:2B:17:E5:44:6F:48:D5:78:9A:9E:D0:D6:FA
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e34362e3136382e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:48:68:2b:bd:fd:64:d1:fe:77:6d:d9:e2:60:51:5d:bc:13:
         8c:a0:36:39:5f:a8:2a:bb:35:87:58:71:69:72:8f:2e:62:de:
         c0:52:29:2a:0a:fc:1d:70:e3:8f:06:44:e0:a2:55:32:00:00:
         64:02:52:ff:ee:fa:cf:c0:fe:92:e2:ad:20:10:fb:3d:69:f2:
         26:c9:51:bd:8c:b4:06:52:16:4e:3a:e0:22:b1:87:5e:f6:68:
         c6:e5:83:53:7b:15:03:84:63:68:8c:3f:ba:bd:bd:21:bd:0c:
         72:f5:96:8c:d9:53:8c:e5:a5:e8:0c:fd:bd:b8:35:98:34:e2:
         e8:5c:66:91:1d:00:ae:23:2d:c1:2b:42:3e:61:28:22:6f:e2:
         18:74:17:1d:c3:57:ae:10:5f:84:d6:37:9c:fc:36:4d:b9:c2:
         30:a0:2a:41:4a:4a:3b:38:69:6e:59:c1:fa:73:81:2b:5e:af:
         99:14:a1:89:2b:4c:42:dd:20:01:10:20:a1:8b:94:6c:68:3f:
         0e:a1:1b:07:30:b0:e6:57:a2:7c:ad:22:f3:71:73:0d:a4:3d:
         66:c8:3e:96:0a:0e:a9:19:d7:c4:8c:fb:73:f1:77:77:50:f4:
         fc:c0:51:41:d0:dc:84:d0:01:92:9e:24:68:32:fa:b8:55:31:
         0e:00:81:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:10 2026 by rpki-client